$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft File: 2a43a868-3d14-440f-a95a-5428c232c5d0.mft (raw, json) Hash identifier: /on/J/s9E/J04WLzbuuFzQAUIF+k0dS2G1PVPpWxp7g= Subject key identifier: FF:5C:7A:9F:D8:AD:82:F8:78:E1:E9:BF:47:A1:0C:85:E5:BF:61:D1 Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584D7F7C849E9D6E0A095366D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft Manifest number: 010D0C9F4328584D12A4CFA7D715AE6277072EA8 Signing time: Tue 14 Apr 2026 00:00:04 +0000 Manifest this update: Tue 14 Apr 2026 00:00:04 +0000 Manifest next update: Thu 16 Apr 2026 00:00:00 +0000 Files and hashes: 1: 2a43a868-3d14-440f-a95a-5428c232c5d0.crl (hash: h7/YfnCkC76oletphagJcNWACSgW6vigvXqVVOxmHxM=) 2: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (hash: PbHlIYHOIGfmnKF5s7nnGds4clQ2E/kgM/1/bzBkEEY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:7c:84:9e:9d:6e:0a:09:53:66:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Apr 14 00:00:04 2026 GMT Not After : Apr 16 00:00:00 2026 GMT Subject: CN=cf35a81a-9904-42df-a5e3-18730083c9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7c:90:dd:3d:09:0f:84:50:fd:1b:46:a0:be: 82:25:05:bb:00:a2:ec:e1:84:32:83:07:2d:06:09: 92:9b:a4:30:dd:2f:d7:f3:a5:8c:1f:d4:7d:1e:81: 7e:fd:9c:c5:d9:d7:b4:59:ee:12:53:3d:df:dd:12: 4f:89:fc:48:2c:7e:7e:65:8d:8e:69:ae:33:8d:e0: 04:a3:21:28:f8:90:f3:0a:de:af:98:e9:98:99:59: 9e:3c:31:82:31:33:d1:f6:ca:f8:c8:ba:9c:f2:05: 6d:49:86:d1:ee:e6:8d:e5:eb:d8:37:7a:54:44:ab: ed:f2:95:c2:17:70:86:8d:70:56:e8:f5:31:23:3c: c8:3a:ec:24:57:f4:c1:e5:99:67:7e:43:be:88:d1: bc:f4:a4:ad:a1:21:f6:90:df:d3:9d:9c:44:32:30: 35:5e:38:d2:1c:52:50:1d:49:8e:0d:e0:d2:78:f3: 5f:a1:b0:df:4b:6d:d3:9a:dd:ae:d3:fc:05:ae:bc: 1c:16:55:44:7e:9e:d3:75:a0:9a:b5:02:12:0a:da: a2:dc:d8:46:09:9d:57:b4:8e:f3:c9:b8:41:d4:fd: 36:c3:84:24:57:f0:0d:fd:68:47:3b:34:73:c3:81: 37:a9:9f:62:0e:3c:2d:e2:12:34:69:1c:9a:2a:2b: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5C:7A:9F:D8:AD:82:F8:78:E1:E9:BF:47:A1:0C:85:E5:BF:61:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f7:1d:bb:47:3d:35:96:06:cb:c8:ee:9d:5c:dd:15:e1:1e: 11:36:62:c6:ad:61:76:72:db:dc:1b:3c:48:2c:c3:5a:df:f1: 07:ec:84:a0:e6:16:7e:af:1a:90:07:58:4d:d6:54:e3:ac:2f: 25:ea:b8:66:d8:e3:a9:d3:07:c3:66:34:be:32:87:07:b1:a7: d3:dc:41:11:30:3d:f2:a7:9c:08:3a:09:55:bf:2d:a9:0a:1d: c6:c5:3e:ac:15:54:02:b5:ca:a6:02:47:cd:14:09:7f:fc:e9: 61:c5:4c:6e:66:b5:61:d0:b1:41:fc:f5:b7:b3:6e:a7:8b:4a: e6:0c:cd:25:80:3f:b7:ed:c1:4c:b8:62:f2:d0:26:39:29:81: e1:5f:cd:ca:f5:89:ca:1b:6e:66:56:3a:a3:0a:f7:cd:a0:a0: 68:c2:5b:c2:72:20:ae:ae:5d:a9:f2:45:68:7a:a5:9d:be:56: 95:9b:84:5f:f3:55:3e:c5:8e:c9:a3:fd:d7:57:4d:6b:1e:d0: 66:d8:c8:4f:b2:c2:fa:a9:80:7a:9f:30:1b:f3:78:03:d4:67: ed:16:d0:b3:27:c2:f0:18:fa:85:55:1a:42:ca:b8:30:69:28: 24:3b:0a:9f:1e:db:15:c3:29:c6:b8:f5:60:b4:e0:e4:93:9f: ce:9c:61:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1/fISenW4KCVNm1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MDQxNDAwMDAwNFoXDTI2MDQxNjAwMDAwMFowLzEtMCsGA1UEAxMk Y2YzNWE4MWEtOTkwNC00MmRmLWE1ZTMtMTg3MzAwODNjOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXyQ3T0JD4RQ/RtGoL6CJQW7AKLs4YQygwct BgmSm6Qw3S/X86WMH9R9HoF+/ZzF2de0We4SUz3f3RJPifxILH5+ZY2Oaa4zjeAE oyEo+JDzCt6vmOmYmVmePDGCMTPR9sr4yLqc8gVtSYbR7uaN5evYN3pURKvt8pXC F3CGjXBW6PUxIzzIOuwkV/TB5ZlnfkO+iNG89KStoSH2kN/TnZxEMjA1XjjSHFJQ HUmODeDSePNfobDfS23Tmt2u0/wFrrwcFlVEfp7TdaCatQISCtqi3NhGCZ1XtI7z ybhB1P02w4QkV/AN/WhHOzRzw4E3qZ9iDjwt4hI0aRyaKiv49wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP9cep/YrYL4eOHpv0ehDIXlv2HRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvMmE0M2E4NjgtM2QxNC00 NDBmLWE5NWEtNTQyOGMyMzJjNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA69x27Rz01lgbLyO6dXN0V 4R4RNmLGrWF2ctvcGzxILMNa3/EH7ISg5hZ+rxqQB1hN1lTjrC8l6rhm2OOp0wfD ZjS+MocHsafT3EERMD3yp5wIOglVvy2pCh3GxT6sFVQCtcqmAkfNFAl//OlhxUxu ZrVh0LFB/PW3s26ni0rmDM0lgD+37cFMuGLy0CY5KYHhX83K9YnKG25mVjqjCvfN oKBowlvCciCurl2p8kVoeqWdvlaVm4Rf81U+xY7Jo/3XV01rHtBm2MhPssL6qYB6 nzAb83gD1GftFtCzJ8LwGPqFVRpCyrgwaSgkOwqfHtsVwynGuPVgtODkk5/OnGFc -----END CERTIFICATE-----Generated at Tue Apr 14 12:06:52 2026 by rpki-client